Currently, the user's permissions are taken into account. As a result, an editor can try to edit a content is not allowed to edit or try to create a content that she is not supposed to be able create.

The interface should not provide the button (or they should be disabled) when the user is not allowed to do something.